Privacy Policy

Last updated: September 2026

What we collect

When you place an order, we collect your name, email address, phone number, delivery address, city, and any delivery notes you provide. This information is used solely to fulfill and deliver your order, and to send you order-related emails.

If you choose to sign in with Google, we receive your name, email address, and Google account ID from Google. We use this to create your Craft Factory account, track your order history, and manage your loyalty points balance. We do not receive or store your Google password.

If you create an account with an email and password instead, your password is never stored in plain text — it is protected using industry-standard one-way hashing (PBKDF2-SHA256), meaning even we cannot see or recover it.

How we use your information

We use your information to process and deliver orders, send order confirmations and status updates, operate our loyalty points and coupon program, and respond to customer service inquiries. We do not sell your personal information to third parties.

Cookies & local storage

Your shopping cart is stored in your browser's local storage. A copy of your cart's contents is also saved on our servers under a random ID (which does not identify you) so we can understand what customers are interested in. If you are signed in, or if you start checkout and type your name, email or phone number, those details are saved with your cart so we can help if you don't finish your order. Cart records are deleted automatically after 60 days. We use a secure session cookie to keep you signed in, and a separate session cookie for our admin dashboard.

Advertising & Meta Pixel

We use the Meta Pixel and Meta Conversions API (Meta Platforms, the company behind Facebook and Instagram) to measure how our ads perform and to show our products to people who may be interested. This records actions on our site such as viewing a product, adding to cart and placing an order, and may set cookies in your browser. When you place an order, we share a scrambled (hashed) version of your email, phone number, name and city with Meta so it can match the purchase to an ad; Meta cannot read these details in plain text. You can control how Meta uses this information in your Facebook or Instagram ad settings, or block cookies in your browser.

Third-party services

We use Resend to send transactional emails (order confirmations and delivery notifications) and Google to offer optional account sign-in. These providers process your data only as needed to deliver these services.

Data retention

We retain order and account information for as long as needed to provide our services, maintain business records, and comply with applicable law.

Your rights

You can request a copy of your data, ask us to correct inaccurate information, or request deletion of your account by contacting us at [email protected].

Contact

Questions about this policy can be sent to [email protected].